unlrss the code is encrypted , they can probablu still see the definition of the stored procedures by looking at the dara in either the information_achema tables or the sysrem tables ... if you have still left them with datareader.